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Sec. 42.6 Retention of telephone toll records. 

Each carrier that offers or bills toll telephone ser\'ice shall retain for a period of 1 8 months such 
records as are necessary to provide the following billing infomiation about telephone toll calls: the 
name, address, and telephone number of the caller, telephone number called, date, time and length 
of the call, Each carrier shall retain this information for toll calls that it bills whether it is billing its 
own toll service customers for toll calls or billing customers for another carrier. 

[51 FR 39536, Oct. 29, 1986] 
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) 

Petition for Rulemaking to Enhance ) 

Security and Authentication Standards for ) 
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CC Docket No. 96-115 


RM-11277 


COMMENTS OF THE UNITED STATES 
DEPARTMENTS OF JtSTICE AND HOMELAND SECURITY 


I. Introduction 

The Ihiited States Department of Justice (“DOJ"’)^ and the Ihiited States 
Department of Homeland Security (“DHS*’)^ (collectively, Ahe Depniiments") hereby 
submit these comments on the Commission's Notice of Proposed Rulemaking {"‘‘Notice'') 
in the above-captioned docket.^ Tlie Departments submit these comments to assist the 
Commission in its development of further rules protecting the privacy of customer 


DOJ includes its constituent components, including the Federal Bureau of 
Investigation (‘TBI”) and the Dnig Enforcement Administration (‘‘DE.A"). 

^ DHS includes its constituent law enforcement components, including the United 
States Secret Service and Immigration and Customs Enforcement. 

^ In the Matter of Implementation of the Telecommunications Act of 1996: 

Telecommunications Carriers ’ Use of Customer Proprietary Network Information and 
Other Customer Information: Petition for Rulemaking to Enhance Securit)' and 
Authentication Standards for Access to CustomerProprietary Network Information. 
Notice of Proposed Rulemaking. CC Docket No. 96-115, RM-1 1277. FCC 06-10 (rel. 
Feb. 14.2006). 
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proprietary network information (“^CPNI”) without sacrificing lawflil access to important 
information that helps solve crimes, prevent terrorist attacks, and safeguard our national 
security. 

This proceeding was initiated primarily in response to a Petition for Rulemaking 
filed by the Electronic Privacy Information Center (“EPIC”) that raised concerns about 
the sufficiency of carrier practices related to CPNI.^ Among other things, EPIC 
recommended tlial the Commission adopt rules requiring that call detail records be 
destroyed when they are no longer needed for billing or dispute purposes or, in the 
alternative, requiring carriers to “de-identify” identification data from the transactional 
records.^ In the Notice, the Commission requested comment on “whether CPNI records 
should eventually be deleted, and if so, for how long such records should be kept.”^ In 
exploring the potential negative consequences of a record destniction mandate, the 
Commission has asked whether “deleting CPNI or removing personal identification 
conflict with other priorities, such as . . . law enforcement.”’ 

The answer to the alx'ive question is an unequivocal “yes,” and we urge the 
Commission to explore ways to resolve the issues EPIC has raised in ways that preserve 
lawflil access to communications records and other CPNI. For law enforcement, such 
CPNI is an invaluable investigative resource, the mandatory destruction of which w ould 
severely impact the Departments' ability to protect national security and public safety. 

^ Petition of the Electronic Privacy Information Center for Rulemaking to Enhance 
the Security and Authentication Standards for Access to Customer Proprietaiy Network 
Information. CC Docket No. 96-115 (filed Aug. 30, 2005) (“EPIC Petition”). 

^ Nee EPIC Petition at 11-12. 

^ Notice\2Q. 
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As reflected in prior Commission filings on CPNI issues, the Departments fully support 

the Commission's goal of protecting the privacy and security of CPNI througli rules 

prescribing the proper use and handling of that very sensitive information.^ But while 

measures are needed to prevent improper access to this sensitive information, such 

measures should not work to limit properly authorized officials from lawftilly accessing 

CPNI in order to solve and prevent crimes and to protect national security and public 

safety. In erasing any solution to the problems raised by the EPIC Petition, tlie 

Departments urge the Commission to reject imposing a mandate to destroy invaluable 

information used by the Departments in many of their most important investigations.^ 

II. The Cominissioti’s Rules Should Focus On Proper Security For All CPNI, 
Not On A Mandatorj Destruction Requirement That Fails To Protect Some 
Records And Frustrates Lawful Access To Others. 


See, e.g.. Reply Comments of the United States Department of Justice and the 
Federal Bureau of Investigation. In the Matter of Implementation of the 
Telecommunications Act of 1996: Telecommunications Carriers ' Use of Customer 
Proprietary Network Information and Other Customer Information. Third Further Notice 
of Proposed Rulemaking. CC Docket No. 96-1 15 at 4, n. 8 (filed Nov. 19. 2002); 
Comments of the Federal Bureau of Investigation, In the Matter of Implementation of the 
Telecommunications Act of 1996: Telecommunications Carriers ' Use of Customer 
Proprietary Network Information and Other Customer Information. Notice of Proposed 
Rulemaking, CC Docket No. 96-1 15 (filed Juf 9, 1997); Comments of the Federal 
Bureau of Investigation, /« the Matter of 1 99S Biennial Regulatory Review of 
International Common Carrier Regulations. Notice of Proposed Rulemaking. IB Docket 
No. 98-118 (filed Aug. 13. 1998). 

^ F.PIC’s alternative recommendation - record de-identification — is also an 

unworkable option with respect to law enforcement’s lawful access to such records. De- 
identification would separate the data that identify a particular caller or recipient (e.g.. 
name, address, numbers called, etc.) from the general transaction records. Because the 
data that identifies a particular caller or recipient is often the critical portion of the call 
record for investigatory purposes, an irreversible dc-identification approach would 
undermine the usefulness of the information provided pursuant to legal access. 
Accordingly- mandating the de-identification of such records would be the equivalent of 
mandating their destruction for law enforcement investigatoiy' purposes. .A. de- 
identification approach should therefore be rejected for the same reasons. 
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A mandatory destruction requirement is the wrong approach for two reasons. 

First, because not all records would be immediately destroyed, efforts are better focused 
on proper security for the records wliile they are maintained. Second, and more 
importantly, the inability to produce records in response to lawJiil authority would have a 
significant negative impact on national security and public safety. Accordingly, the 
Departments urge the Commission to focus on security measures to protect all CPNI 
against unauthorized access rather than a rule tJiat would also preclude law fully 
authorized access. 

.■\s tlie Commission recognized when it explicitly asked about the impact of 
epic's records dcstniction proposal on other concerns. CPNI has other valid uses, such 
as fraud prevention and the protection of a carrier’s own network.^*^ Another legally 
authorized use is to investigate crime and protect national security and public safety. The 
Departments seek lawful access to CPNI in connection with investigations of all kinds - 
from child pornography to illegal drug trafficking, counter-intelligence, espionage, and 
more. In fact, as the FBI has previously advised tlie Commission, lawfiilly-obtained 
CPNI is used in virtually every federal, state, and local investigation of consequence.'^ 
Such CPNI is critically important not only in solving crimes but also in preventing crimes 
and even saving lives.'' As discussed below, the same is tme in the national security and 

The Departments submit that, beyond any retention period required by law. 
carriers should be free to retain voluntarily CPNI for other legal and appropriate 
purposes, such as protecting their networks and mitigating fraud. 

" See Comments of tlie Federal Bureau of Investigation, in re Implementation of the 
Telecommunications Act of 1996: Telecommunications Carriers ' Use of Customer 
Proprietary Network Information and Other Customer Information. CC Docket No. 96- 
115 (filed Jul. 9, 1997) at 5. 
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espionage contexts, where lawfully-obtained CPNI has enabled law enforcement and 
national security agencies to prcvcnl terrorist acts and acts of espionage.^'’ The courts 
have likewise long recognized the importance of telephone records to the administration 
of justice - both to law enforcement in the investigation and prosecution of serious 
offenses, such as illegal drug trafficking and organized crime, and to defendants in 
establishing an alibi defense. Tluis. a mandatory destruction requirement - particularly 
one tied to a point in time completely unrelated to these purposes, i.e.. when records 
cease to be ‘‘needed for billing or dispute purposes” - would inevitably result in the loss 
of critical information to many such investigations and cases. 

Moreover, a mandatory records destruction regime would be particularly 
inappropriate, because it could hinder efforts to counter inlernalional terrorism. Lawftjl 
access to communications records is a critical tool in the figlit against global terrorism. 
Such records, when combined with other investigative information, can be used to 
establish the movements and identities of known and suspected terrorists. Mobile phone 
records, for example, were instiaimental in tracking down the perpetrators of the Madrid 


A-/, at 6-7. 

See, e.g. II.S. v. Hcmardt^ F. Supp. 2d 801 (N.D. 111. 2001 ) (phone records 
helped establish defendant’s “long-time connection to Chicago organized crime”): U.S. v. 
Scala, 388 F. Supp. 2d 396 (S.D.N.Y. 2005) (cellular phone records showed numerous 
calls between defendant and known organized crime figures): Reporters Committee for 
Freedom of the Press v. AT&F 593 F.2d 1030, 1036-37 (D.C. Cir. 1978) (noting that 
“toll-billing records have become an invaluable law enforcement aid” and that 
information from toll-billing records has been used by state and federal law’ enforcement 
officials in criminal investigations and prosecutions for over 50 vears). See also Butler v. 
State, 716 S.W.2d 48 (Tex. Crim. App. 1986) (telephone toll record was the key factor in 
establishing alibi defense). 

We note that any mandatory data destruction requirement would also largely 
negate the utility of the existing data preserv^ation scheme under 18 U.S.C. § 2703(f): if 
the data relating to a specific investigation has been destroyed, there will be nothing for 
providers to preserve in response to a request from law enforcement. 
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bombings that killed 191 and injured approximately 1,800 people on March 1 1. 2004.^'^ 
The National Commission on Terrorist Attacks Upon the United States also relied on 
telephone records in numerous instances to establish the movements and contacts of the 
9/1 1 hijackers before their terrorist attacks on the World Trade Center and the Pentagon 
on September 11. 2001.^' 

It is precisely these kinds of concerns that motivated the Commission to abandon 
its former rules requiring data destruction and adopt its current mles that require the 
maintenance of certain categories of CPNL Prior to 1986, the Commission's Part 42 
carrier record-keeping niles required, among other things, that carriers (1) macerate or 
destroy the legibility of records the contents of which are forbidden by law to be di\ailged 
to unauthorized persons.^^ and (2) retain telephone toll records for six months.^^ As part 
of a comprehensive review by the Commission of its Part 42 niles and in response to a 
related request by DOJ to extend the telephone toll record retention period specified 
therein, the Commission (among other things) eliminated the records destruction 


See “Madrid Bombing ‘Manager’ in Court.” BBC News (June 3, 2005), viewable 
at http://news.bbc.co.uk go/pr/fr/-/2/hi/uk_nevvs/england/berkshire'46071 75. stm 
(telephone records used to show bombing “manager’’ had been in contact with people 
involved in the Madrid bombings). 

^ ' See The 9^1 1 Commission Report (released Jul. 22, 2004) at 2 1 7, 5 1 5 n.26, 522 
n.68. 

See In the Matter of Revision of Part 42, Preservation of Records of 
Communication Comtnon Carriers. Notice of Proposed Rulemaking. 1985 FCC LEXIS 
2945 TlTl 13, 23 (1985) CTart 42NPRAr) (discussing the record destruction requirement 
contained in the then-current version of Section 42.6 of the Commissions rules, 47 C.F.R. 
§ 42.6 (Destruction of Records) (1985)). 

See Part 42NPRM 18 (discussing tlie toll record retention requirement 
contained in the then-cuiTent version of Section 42.9 of the Commissions rules, 47 C.F.R. 
§ 42.9 (List of Records) (1985)). 


2 


NSL VIO- 16680 



requirement and extended the toll record retention period to 18 months. In granting 
DOJ's request, the Commission specifically recognized that an extension of the retention 
period was warranted in order to '‘support successfiil investigations and prosecutions . . . 

In extending the retention period, the Commission - with DOJ's input - refined and 
narrowed the specific information that law enforcement stated it would need to support 
its investigative efforts at that time." 

In addition to the Commission's own prior acknowledgment of the difficulties a 
destmetion requirement presents, recent experience in other countries further highlights 
the problems created by such requirements. The establishment of a data destruction 
regime in the European Union (“EU”) a number of years ago has been found to be 
incompatible with protection of public safety and national security. In response, the EU 
recently adopted a Directive - binding on all of its member countries - tliat will have the 
effect of mandating all ‘'providers of publicly available communications services” to 


See In the Matter of Revision of Part 42. Preservation of Records of 
Communication Common Carriers. Report and Order. 1986 WL 290829. 60 Rad. Reg. 2d 
(P&F) 1529 tt 4. 23-27. 38, 41-42 (1986) CPart 42 Order"). DOJ's request was 
supported by the Advisory' Committee for United States Attorney's, the FBI, the Bureau 
of Alcohol. Tobacco and Firearms, the U.S. Postal Service, and tlie Immigration and 
Naturalization Service. See Part 42NPRM^ 18. 

See Part 42 Order^ 41. 

See Part 42 Order ^ 43. The specific information that DOJ indicated law 
enforcement would need at that time includes the name, address, and telephone number 
of the caller; telephone number called; the date. time, and length of the call; and 
automatic message accounting tapes. Id. The list of law enforcement -required 
information was incorporated into Section 42.6 of the Commission’s rules and remains 
listed therein today. See 47 C.F.R. § 42.6 (2006). 
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store and retain communications data for up to two years.^^ In acknowledging the need 
for data retention requirements, the EU Parliament and Council recognized that: 


retention of data has proved to be such a necessary and 
effective investigative tool for law enforcement in several 
Member States, and in particular concerning serious 
matters such as organised crime and terrorism, it is 
necessary to ensure that retained data are made available to 
law enforcement authorities for a certain period, subject to 
the conditions provided for in this Directive.^^ 


epic's recommended data destniction majidate would cause the Commission to 
regress to a course it has long since rejected. If anything, reliance on telephone call 
records as an investigative resource to protect public safety and national security has only 
increased and become more critical in the almost twenty years since the Commission 
revised Section 42.6 of its niles to extend the telephone records retention period.^’*' 
Notwithstanding this increased reliance on such records, however, the efficacy of the 
Commission's current Section 42.6 requirement to meet law enforcement needs has been 
significantly eroded. 

While the risks are clear and many, the benefit from a mandatory destniction 
requirement is largely unclear and certainly limited. The mandatory destruction of some 


‘ See Council Directive, 2006/24/EC, 2006 O.J. (L 105) 54, Article 6 ("Directive"), 
viewable at http://europa,eii.int/eur-le.\/lex/JOHtml.do?uri=OJ;L:2006:105:som:en:html. 
See also Miriam H. Wiigmeisler and Karin Retzer, Data Retention - Implications for 
Business. 1 NO. 2 Privacy & Info. L. Rep. 7 (2006). 

See Directive at 4 T| 9. 

Moreover, as the Commission notes in the Notice, carriers themselves have 
already expressed concern about potential conflicts with Commission nilcs that require 
that call records and other CPNl be kepi for at least a minimum period of time. .See 
Notice 20 (noting caniers" comments that destroying records might conflict with the 
Commission's Part 42 record-keeping niles, 47 C.F.R. §42.01-1 1). 
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CPNI does nothing to address a significant portion of CPNI. specifically information 
needed for billing disputes, which will still need to be secured.^** In fact, the material 
retained will most likely be the most recent records and hence possibly the most useftil 
for data brokers. Rather than expending effort on promulgating mles with significant 
omissions, the Commission should instead focus its efforts, and those of carriers, on 
appropriate security measures that ensure that any access to such records is done only 
with \ alid legal authority. .As the Department of Justice has urged the Commission for 
years, one large step in that direction would be to require that CPNI of U.S. customers of 
domestic services be stored exclusively within the United States. 

In opposing and pointing out the inadequacies of a data destruction regime, the 
Departments do not thereby imply tliat the current CPNI niles are adequate effectively to 
meet law enforcement's needs or protect public safety and national security, As noted 
above, the Departmenis have previously asked the Commission to strengthen the security 
of these records in a number of ways.^*^ Further, developments in the world and in the 
communications marketplace since the Commission's last examination of these mles 
have higliliglited the limited scope of the Commission's rules. Today, many modern 


fhe statute of limitations in Section 415 of the Communications Act for billing 
disputes is two years. 47U.S.C. §415. Tlie nature of Section 415 necessarily compels 
carriers to maintain all potentially relevant documents needed in connection with 
resolving actions concerning recovery of lawfiil charges or damages. 

See Reply Comments of the United States Department of Justice and the Federal 
Bureau of Investigation, In the Matter of Implementation of the Telecommunications Act 
of 1 996: Telecommunications Carriers ' Use of Customer Proprietary Network 
Information and Other Customer Information, Third Further Notice of Proposed 
Rulemaking, CC Docket No. 96-115 at 4, n.8 (filed Nov. 19, 2002). 

See id. See also Comments of the United States Department of Justice. In the 
Matter of IP-Enabled Senuces. Notice of Proposed Rulemaking. WC Docket No. 04-36 
(filed May 28. 2004). 
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communications service providers maintain sensitive records about their customers' 
private communications, yet these new carriers have not been made subject to the niles 
that have traditionally governed CPNl."^ In addition, as carriers covered by the 
Commission's existing niles have increasingly moved away from classic billing models, 
in which charges are itemized and billed by t>pe of service, to non-measured, bundled, 
and flat-rate service plans, some carriers have claimed that call records under such new 
plans are not covered by Section 42.6 because they are not "toll records." Therefore, 
these carriers have argued that no records need be retained This has significantly 
diminished the availability of call records that were historically made available to law 
enforcement, pursuant to lawful process, as traditional "billing records" under the 
Commission’s rules. While it is recognized that changes in the communications industry 
over the past decade have resulted in changes in the record retention practices of such 
providers, it must also be acknowledged that the nature and immediacy of the tlireat 
confronting public safety and national security has significantly changed and evolved 
such that the need lawfully to access these critical records has increased, not diminished. 

As a consequence of these changes, the Departments believe it is necessary to re- 
examine the Commission’s existing rules which no longer ftilfill critical public safety or 
national security needs in tliree key respects: 1) the scope of carriers and providers 


Id. To the extent that the Notice requests comment on w'hcthcr any requirements 
that the Commission might adopt in the present nilemaking should extend to VoIP or 
other IP-enabled service providers, the Departments refer to their May 28. 2004 
comments on this subject. 
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covered: 2) the scope of information and records covered, and: 3) the duration of 
retention of information and records. 

The critical role that communications records play in tlie Departments’ most 
important investigations and the serious consequences for public safety and national 
security which result tfom the unavailability of such records cannot be understated. The 
Attorney General recently underscored this point when he noted that the investigation and 
prosecution of child predators depends critically on the availability of evidence that is 
often in the hands of Internet service providers. He observed that this evidence will be 
available to law enforcement only if the providers retain the records for a reasonable 
amount of time. Consequenth’. the Attorney General asked experts at the Department of 
Justice to examine how the failure of some Internet service pro^'iders to keep such 
records has hampered the Department’s efforts to investigate and prosecute child 
predators.^^ In recognition of the importance of this issue, tlie Departments each will be 
evaluating how the availability of different categories of data held by different types of 
modern communications carriers impacts the Departments’ respective missions. In 
addition, the Attorney General has pledged to reach out personally to leading service 
providers and other industry leaders to solicit their input and assistance. As these efforts 
develop, the Departments expect to have further views on how long data should be held, 
what data should be retained, and vvliicli earners should have such obligations. 

It should be noted that whereas the Commission has limited the retention period 
for toll records to 18 months, the statute of limitations for many federal felonv crimes is 
five years, during which time law enforcement needs for relevant evidence continue. The 
Commission should explore, with furthi^ input from law enforcement, the degree to 
which the existing 18-month rule should be extended. 

See Prepared Remarks of Attorney General Alberto R. Gonzales at the National 
Center for Missing and Exploited Children (NCMEC) in Alexandria. Virginia, on April 
20. 2006. available at http: //www.usdoj.gov/ag/speeches./2006,'ag_speech_060420.html. 
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III. Any Notice Requirement Adopted by the Commission Should Include A 
Provision Requiring Advance Notice to Law Enforcement and. Where 
Appropriate, Delayed Notice To The Consumer. 

The EPIC Petition also suggested that carriers should be required to notify 

affected customers when there has been an improper disclosure of CPNI.^‘ In the Notice, 

the Commission went further and asked for comments regarding “the costs and benefits 

of routinely notifying customers after any release of their CPNI/''^ While the 

Departments strongly support prompt victim notification in the case of security breaches, 

we believe any mle requiring such notification should also require that carriers first 

notify law enforcement authorities and, where appropriate, allow law enforcement to 

request a reasonable delay in notitication to the consumer where such notification miglit 

hann related law’ enforcement investigative efforts. In addition, any requirement that 

customers routinely be notified of disclosures of their CPNI should make clear tliat it 

does not alter the niles already established by Congress regarding the circumstances 

under which a customer must be notified of law enforcement access to customer records. 

Requiring advance notice to law enforcement of security breaches, together with 

the option of delaying consumer notillcation, can serve several important goals. First, 

anecdotal evidence suggests that many CPNI breaches go unreported to law enforcement. 

Only by prompt investigation of such breaches can the offenders be identified and 

punished. Thus, required reporting to law enforcement will deter further breaches of 

CPNI security. Second, where deemed necessary by law enforcement, a reasonable delay 

can help preserve evidence critical to the investigation of misappropriation of CPNI. If a 

carrier suffering an intrusion or theft must immediately announce the security breach to 

EPIC Petition .It 11. 
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affected customers and to the public, the persons responsible may be tipped off that law 
enforcement is investigating their crime. Criminals W'ould then have the opportunity to 
destroy evidence, change their behavior, and otherwise jeopardize the investigation and 
avert justice. Indeed, the approach outlined above is the one taken by a variety of 
proposed legislation currently under consideration by Confess. 

The Commission's questions regarding routine notification of any access to 
CPNI. e\ en when no security breach is suspected, raise additional issues.^' There may be 
good reasons tliat a carrier may want to disclose CPNI without notifying its customer, 
e.g., during the course of a fraud investigation. But if the Commission does decide to go 
beyond notification of actual security breaches, it should at a minimum make clear that 
any new requirements do not alter the balance struck by Congress for wlien law 
enforcement access to customer records must be disclosed. See 18 U.S.C. 2701 et seq. 
Because Congress has already established a structure for customer notification of law 
enforcement access to customer records, the Commission sliould exclude disclosure of 
CPNI to law^ enforcement from any routine notification requirement. 

IV. Conclusion 

For the reasons stated herein, the Departments urge the Commission not to adopt 
rules mandating the destruction of call records and similar CPNI. a vitally important 
investigative resource for protecting public safety and national security. Such a nile 
would undoubtedly hinder the Departments' ability to carry out their respective public 


Notice ^ 23. 

See, e.g.. Data Accountability and Trust Act, H.R. 4127, 109th Cong. (2005): 
Personal Data Privacy and Security Act of 2005, S. 1789, 109th Cong. (2005). 

Notice ^ 
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safety and national security responsibilities. Additionally, the Departments suggest that 


any new rules requiring customer notification in the case of improper CPNI disclosure 
include a requirement that carriers provide prompt notice to law enforcement and an 
opportunity for law enforcement to request delayed notification to the consumer. We 
appreciate the Commission's recognition and support of the Departments' important 
mission in these areas. 

Dated; April 28, 2006 Respectfully submitted. 

The United States Department oe Justice 


/s/ Laura H. Parskv 

Laura H. Parsky 

Deputy Assistant Attorney General 
Criminal Division 
United States Department of Justice 
950 Pennsylvania Avenue, N.W. 
Room 2113 

Washington, D.C. 20530 
(202)616-3928 

and 

/s/ Elaine N. Laminert 

Elaine N. Laminert 
Deputy General Counsel 
Office of the General Counsel 
Federal Bureau of Investigation 
United Stales Department of Justiee 
J. Edgar Hoover Building 
935 Pemisylvania Avenue, N.W. 
Room 7435 

Wasliington, D.C. 20535 
(202)324-1530 
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and 


/s/ Michael L. Ciminelli 

Michael L. Ciminelli 

DepuW Chief Counsel 

Office of Chief Counsel 

Drug Enforcement Administration 

United States Department of Justice 

Washington, D.C. 20537 

(202)307-8020 

and 

The United States Department of Homeland Security 


V Stewart A. Baker 

Stewart A. Baker 

Assistant Secretary for Policy 

United States Department of Homeland Security 

3801 Nebraska Avenue. N.W. 

Washington, D.C. 20528 
(202)282-8030 
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NON 


ORD 


b5 


b6 

b7C 


uiiyiiij iuiy»!,cigy 

From: THOMAS, JULIE F. (OO:) (FBI) 

Sent^^^^^^_^uesda^^gptember 05, 2006 3:11 PM 
To: j f OGC) (FBI) 

Subject: Kt; l\SL enforcement issue 


b5 


UNCL1 


b6 

b7C 


Original Mes: 

From: 

Sent; 

To: 

Cc: 

Subject: 


ioea 


](OGC) (FBI) 


Friday. September 01. 2006 8:06 AM 

I ~t OGC) (FBI), 

THOMAS, JULIE F. (OGC) (FBlJ 
NSL enforcement issue 


(FBI) 


SENSITI 

VE BUT UNCLASSIRED 

NON-RB 

^ORD 


SECW 
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[Code of Federal Regulations] 

[Title 47. Volume 3] 

[Revised as of October 1, 2005] 

From the V.S. Government Printing Office via GPO Access 
[CITE: 47CFR42.6] 

[Page 6] 


TITLE 47-TELECOMMltNICATION 

CHAPTER I-EEDERAL COMMUNICATIONS COMMISSION (CONTINUED) 

PART 42 PRESERVATION OF RECORDS OF COMMLiNICATION COMMON 

C.ARRIERS-Table 

of Contents 

Sec. 42.6 Retention of telephone toll records. 

Each carrier that offers or bills toll telephone ser\'ice shall retain for a period of 1 8 months such 
records as are necessary to provide the following billing information about telephone toll calls: the 
name, address, and telephone number of the caller, telephone number called, date, time and length 
of the call, Each carrier shall retain this information for toll calls that it bills whether it is billing its 
own toll service customers for toll calls or billing customers for another carrier. 

[51 FR 39536, Oct. 29, 1986] 
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To:L^ 


i^gust 
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: FW 2709 Attachment.txt 
(OGC) (FBI) 


04 2005 8 -fin i'll 


~lfnTl rFRT-Irr 


b6 
b7C[ 


1 iBiaavflnn H 





■ ■iS'STSII 




ZSc^CPBiJl 

]l (OGCJ L.FB1T" 


Cc: BOWMAN, MARION E. (Ol) (FBI); 
Subject: FW: 2709 Attachment 


] (OGC) (FBI); I I 


|(OGC)(FBl) 


UNCLASSIFIED 

NON-RECORD 
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b6 

b7C, 


b6 

b7C 
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* Urtit 

National Security Law Policy and Training Unit 


FBI HQ R 
STU III 
Unclassi 
secure Fax 


ifi 


'gfn 797? 


Ail IKFOPBATIOH :eOmiKED 

HEPEIW IS mUSSIFIED 

DATE 06-08-2007 BY 6517? DKH/KSR/JU 
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TO 


r 


t 






ciginaL Message 


subject: 2/uy Attachment 


(OGC) (FBI) 
St 03, 200: 
[(OGC) (FBI); 


io 

!nmi 


11-10 am 


(OGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


b6 

b7C 

b2 


Assistant General Counsel 
National Security Law Branch 
iral Counsel FBI 
Voice 
Pager 

secure Fax 
Fax 


UNCLASSIFIED 


UNCLASSIFIED 
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Subject: 

UNCLASSIFIED 

NON-RECORD 


lOGC) (FBI) 

ThiirQHaw Dpr^mhpr 14. 90^ 11 
I I fOGa FRIVi 

bDGCHFBlL, 

(OGC) fl ^ 

OGC) (FBI)j 

I (OGC) (Fsfl 
FW: Draft NSL EC I 


You should read the attached EC 


Unit Chief 

National Security Law Policy and Training Unit 
FBI H Q Room 7975 

STU II I pj I 

Unclassified 

Secure Fax: (202| I 


Original Message 

From: THOMAS, JULIE F. (OGC) (FBI) 

Sent: n^r,»mh^r 01 12:^8 PM 

To: I I I ^ QGCUfBD 

Cc: I lOGC) (FBI! 

Subject: ^ r r5r ‘ aFtW E n ^ * 

UNCLASSIFIED 

NON-RECORD 


! made some edits and asked a question. 

wiLilie 
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b7C 

b5 


Original Mps yme 

From: I _l (OGC) (FBI) 

Sent: Monday, December 11, 2006 4:29 PM 


To: 

Cc: 

Subject: 


THOMASjjyUE_yOGC) (FBIV 

I tFBli 

Draft NSL EC H 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 
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NSLmiscellaneousEC 
-wpd (24 KB)... 
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SECRET 
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b7C 
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Unit Chief 

National Security Law Policy and Training Unit 


FBI HQ Roo m 797.; 
STU III; (202 \ , 

Unclassified Fa x: (2Q2)| 
Secure Fax: (202| 


ALL IKFCtimTIOK COOTAIIffiD 
HEF£IH 13 UfICLASSIFIED EXCEPT 
laHERE SEOTfll OTHERUISE 


DATE: 06-09-2007 

CLASSIFIED BY 6;Sll9 Dlffl/KSRATTJ 

REASCH: 1.4(G); 

DEGLA33IF7 ON: '06-09-2032 


l (OGC^ (FBI) 

C\f, 2006 7:34 

I I (FBl I l (OGQ-^ 

I |OGC) (FBI); THOMAS, lULIE F. (OGC) (FBI)I 

LAMMERT, ELAINE N. (OGC) (FBI) 

RE: NSL enforcement issueW Billing Records \ 47 CFR 42.6 \ HIF9A 


UNCb<^SIFIED 

NOn-RfecORD 



SECRET 
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CPNINPRMCOMMEN 47 CFR42-6_Tel 
rS(4-28-06FINAL)... Billing Record... 
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b7C 
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PRiVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI 
WITHOUT PRIOR OGC APPROVAL 



Associate General Counsel - Unit Chief 
Science & Technology Law Unit 


Engineering Research Facility 


Qu antico, VA 22135 

Tel.l 

Fax 




Subject: 


RE; NSL enforcement Issue 
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NON^^OF^ 
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From; f T oGO (FBH 

Sent: Tuesday, September 05, 2006 6:05 PM 

To: THOMAS, JULIE F. (OGC) (FBI) 

Subject: RE: NSL enforcement issue 

UNcl>€glFIED 

NON-RECORD 
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b6 

hlC 


upi^inai luiissagi 

From: THOMAS, JULIE F. (OGC) (FBI) 

Se nt: Tuesday. Sy tember 05, 2006 3:11 PM 

To: I y OGC) (FBI) 

Subject: RE: NSL enforcement issue 

UNCLgacCFIED 

NON-RECORD 


b5 


Julie 


-Original Me» 


b6 

From: L 

Sent; 

S; c 

IfOGC) (FBI) 

Friday, September 01. 2006 8:06 AM 

KOGC) (FBI) 1 1 

TH5MA5JUL1E F.W) (fbi);| 

1 (FBI) 

Subject: 

lysL enrorcemeni issue 


b7C 

SENSITIVE^BUT UNCLASSiRED 
NON-RE(2bRD 
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From: 

Sent; 

To: 


Subject; 


OGC) (FBI) 


Wednesday Sep tember or onoA dm 
OGC) (FBI)l 

bGClIEBOl 


_ OGC) (FBI 
;OGC) (FBOf^ 


FW: NSL enforcement issue 


(OGC) (FBI)J 


3PI) (FBI)[ 
l^nr:r^ fFPi 




_l(OGC) (FBI); 
tOGC ) (FBI); 
^(OGC) (FBI) 


UNCI^gSlFIED 

NON-R^COF^ 


brings up very important issues on NSLs. 


Unit Cliief 
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HEP£IK IS mCLASSiriED EXCEPT 
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National Security Law Policy and Training Unit 
FBI HQ Roo m 7975 

STU III: f2Q2 l 1 . 

Unclassified Fax : (2Q2| | 

Secure Fax: (202)1 i 


DATE; 06-09-2007 

CLASSIFIED BY 6 517? DHH/K3R/JDJ 

REASOH: .1.4 (C) 

DECLASSIFY' OH; 06-09-2032 
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b7C 


Original 

From: I I rOGCWPBn 

Sent: Wednesday, September 06. 2 006 12:22 

To: |» I ^OGCWFBl| jrOG CWFRT^ 

Ce: I l OGCY (FBU: THOMAS, JULIE F. (OGC) (FBI);| fOGC) (FBI) 

Subject: FW; NSL enforcement issue 

UNC^SIFIED 


(S) 
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b7C 


Original Message 

From: THOMAS, JULIE F. (OGC) (FBI) 

Sent: Wednesday, September 06, 2006 11:52 AM 
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SECRET 
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To: 

Subject: 


RE: NSL enforcement issue 


J(OGC)(FBI) 


UNCL^^IFIED 

NON-RECORD 
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Julie 
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b7C 


Original Message 

From: I I fOGd (FBI) 

Sent: ^^lescfay^eoterriBe^B^OOS 6:05 PM 

To: THOMAS. JULIE F. (OGC) (FBI) 

Subject: RE: NSL enforcement issue 

UNCL>(^SIFIED 

NON-RECORD 


b5 


b6 

b7C 


--Original Message-- 
From: THOMAS, JULIE F. (OGC) (FBI) 

Sent: Tupsiiav' Sentemher (IS. 7nOfi 3:11 PM 


Subject: Kb: NbL enforcement tssue 


](OGC)(FBI) 


UNCLASSIFIED 

non^Scord” 


b5 


Julie 


b6 

b7C 


Original Mes|aflfii 

From: I 


To J 

Cc: THOMAS, JULIE F. (OGC) (FBI); 
Subject: NSL enforcemeni 


1 


]oGC) (FBI) 


|y, September 01, 2006 8:06 AM 
iGC) (FBI) I 


}fbi) 


SENSr 

NON-RI 


BUT UNCLASSIFIED 
■ORD 
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From: 

Sent; 

To: 


Subject: 

Importance: 
SI 


RECORD NSL 


Hiaii 

fORN 



ALL IHFOPKATIOM COKTAIKED 
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&THERE SHOTjni QTHEPXiTISE 
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b7C 
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b7C 

b5 


I will discuss this at our unit meeting. 


Unit Chief 

National Security I.aw Policy and Training Unit 
FBI HQ Roo m 7975 * 

STU III: (202^ 1 " I 

Unclassified Fax : f202 ll I 

Secure Fax: 

-Original Mesa 


$«nt: 

To: 

Cc: 


DATE: D6-09-2007 

CLASSIFIED BY 65119 DIffl/K 3 R/JU 

REASON: i. 4 (C) 

DECLA3 31 rr OH; 06-09-2032 


From: I I fOGCHPBn 

Tuesday, August 08, 2006 2:57 PM 

yPRONl.VALERl^^Jaa^) (FBI) 


THOMAS. JULJFF. fOGCWFBn: 

I _L/nrtrWFRT\- 


Subject: Q 

Importance; 


(OGC) (FBI); 
(OGC) (FBI): 




(FBlJ 

f(OGC)(FBI) ^ 


,020^1)^ 


J(FBI)^ 


SEcii^??DRg5El,NOFORN 
RECORD NSL 


(S) 


bl 

b5 

b2 

b7E 


DERIVED FROM: G-3 FBI Classificatioj 


jJe G-3, dated 1/97, Foreign Counterintelligence 
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SECR^ 


Invest! 
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Nation exemption 1 

SECRETE 

'(R 

>lCON.NOFORN 


DERIVED FROM; G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence 
lnvestia\tioi(s 

DECLAS^ICATION EXEMPTION 1 
SECR^/OfeCON.NOFORN 


SECTiET 
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(Rev. 01-31-2003) 

FEDERAL BUREAU OF INVESTIGATION 

Precedence: RnuTTMF. Date: ■■..?/ 1 uF- 

To: Can Valerie si'gnou'i an all Division EC? 

Attn: ADIC/SAC 

CDC 


b6 

b7C 


b6 

b7C 


From: Office of the Gener.al Counsel 

I'Jational 

Contact : I 


Approved By: 


Caproni Valerie E 
ThC'mas Julie F 


Drafted 
Case ID 


By: 


pih 


#: (U) 31?»HQ-A14G7720-OGC 


AH IIJFORIIATIUH CDfJTAII'JED 

HEREIN 13 in^CLASSIFIEp 

DATE 06-19-2007 BY 6.517? DKH/KSR/Jia 


1073946 


Title: (U) LEGAL ADVICE AJ4D OPINIONS; 

UPLOADING OF NSL RETURN INFORMATION 


Synopsis: (U) Provides guidance to the field ac to the need co review 

MSL return information prior to uploading the informati'jn ini':' FBI 
'da t ah' a s 0 s . 

Details: (U) 

It has come to the attention of the Office 'jf General 
Ciunsei, National Security Law Branch (NSLB), that tnere may be 
'.".'casi'.'ijs i.n wliiclj NSL irilorma Lion has been uploaded into Telei-'hone 
Appli ratici'ic and other databases prior tc having been rcviowc'd by any 
FBI irersonnel . This is particularly likely to occur if the 
inf ' 2 riTiation is received in electronic form. However, a problem arises 
if the information that v;as received is net responsive to the NSL and 
thus, not relevant to an authorized national security investi'oation, 
or, alternatively, if there vras a mistake by the FBI in the MSL such 
that the records are responsive but not relevant to an authorized 
investigation. Such deficiencies in the NSL return information may 
di sC'‘’Vered, or, discovered to* late to j;'rev‘^nt the use of 
information tnat the FBI did not properly collect. Therefore, io is 
imperative that the records be reviewed before uploading to assure 
that they are relevano oo an authorized national security 
investigati'On. Thereafzer, if the records were properly obtained. 
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T?: All Divisions From: Office or the General Counsel 

Re : 31 9X-HQ-A1437720-OGC 12/15/1006 


they may te uploaded into a database. _f there is a problem vrith th 
manner in v/nich they v/ere obtained, I'ther steps need to be taken.' 


b6 

b7( 

b2 


f 




( iuf-*s t i ' 'iis at." >ut t 

■3t 57 ll I 


his 


iiial.t «-*r may 


1- Ks. Caproni 


d i r'^d ed I <> AGC 


T f Tl'jpr reoor'‘ts were r.o" properly obtained, i.e., there waa a triiat.ahe 
]:ry the carrier or the FBI in the KSL process, then the records should be 
•i:e;[uestered vjith the CDC, and a potential IOC reported to HOLD. Thereafter, 
in its respoiisive EC, MSLP will indicate the proper disposition of the 
records. It toe records vjere in tact properly obtained ( e . 'U • . the records are 
covered loy the attachment, if not the body of the NSL)), they may be retained 
anJ uploaded. If the recerds v/eie not properly obtained but are :.ele'.ai.l to 
an authorized investigaticn ( e . g . . exceed the time frait\e of the MSL but 
pertain to the- subject of the NSL), the records should rorrain sequestered 
until another KSL is Issued to cover those records. If the records u'ere not 
pr'perly ebtained and are not relevant "o an authorized i nveat i .ja t i r.n , the e;f)C 
is er.pected to contact the owner of the records and deaernlne if tne entiay 
■rfants the records reeurned to it or deseroyed Iry the FBI. For a full 
exr lanation of the luanner in which NSL records should be lualiitained for lOE 
purposes, see EC, dared 1 1,/ 1 o./r u j 6, r'/B-HQ-cirr9'/3d, serial rS7u. 
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